Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e22d29ec-f44e-36a4-8838-639b6afde996.roa
File:                     e22d29ec-f44e-36a4-8838-639b6afde996.roa (raw, json)
Hash identifier:          fIC2J2IC4iEZUGJxxLkhtBVEOEXV7pf9CWmhb9y15YI=
Subject key identifier:   A2:8A:07:A5:C9:33:69:41:6B:18:0D:67:D5:52:AB:FA:1F:38:7F:1F
Certificate issuer:       /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial:       010D0C9F4328584ABAB011336EAC1FD3B65D8380
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e22d29ec-f44e-36a4-8838-639b6afde996.roa
Signing time:             Sun 03 Aug 2025 02:35:52 +0000
ROA not before:           Sun 03 Aug 2025 02:35:52 +0000
ROA not after:            Sat 01 Nov 2025 02:35:52 +0000
asID:                     22616
IP address blocks:        2605:4300:1300::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ba:b0:11:33:6e:ac:1f:d3:b6:5d:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
        Validity
            Not Before: Aug  3 02:35:52 2025 GMT
            Not After : Nov  1 02:35:52 2025 GMT
        Subject: CN=91ca3bd8-0ef3-4684-bb3a-c260174fed48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:6c:ce:8a:9f:0d:ab:c1:02:11:3f:c6:e0:27:
                    d3:47:3c:55:b5:0e:2e:82:32:99:80:01:37:7b:62:
                    fe:71:c6:2b:68:5a:91:40:c6:2b:8e:b5:8f:15:ee:
                    65:87:77:34:b3:be:cc:d4:34:75:49:01:3e:c5:27:
                    34:e5:0e:b0:a2:04:75:b5:c7:eb:c1:23:be:56:ed:
                    08:c8:4e:91:d2:04:62:9b:ac:c6:f4:9f:3b:57:e0:
                    c2:e7:7c:c3:9d:04:9e:59:82:9b:5f:a8:cd:30:f9:
                    a0:ec:1e:7b:da:0c:41:8e:58:0c:96:3a:a2:f0:ab:
                    07:c4:b6:f0:e3:61:93:68:98:ec:e9:08:21:4f:4c:
                    38:a8:7f:98:5c:ff:78:cc:06:b3:c2:65:ff:e6:95:
                    91:56:79:5a:3f:f0:52:47:e2:e2:a5:31:ff:c4:c9:
                    e4:e1:31:43:89:98:cb:15:d2:29:02:96:c1:1d:7b:
                    f0:09:98:4d:e1:7f:90:92:4a:c4:a2:83:4a:55:22:
                    08:8e:3e:62:f4:0a:7e:75:a8:84:43:e2:54:50:fc:
                    df:bc:52:78:81:89:1c:9e:d2:77:c7:17:5a:84:ac:
                    59:96:77:ad:c5:d9:3b:93:8a:51:ad:14:79:9d:20:
                    90:ea:87:69:60:18:d5:1d:2f:38:95:93:bb:c9:03:
                    ae:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:8A:07:A5:C9:33:69:41:6B:18:0D:67:D5:52:AB:FA:1F:38:7F:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e22d29ec-f44e-36a4-8838-639b6afde996.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl

            X509v3 Authority Key Identifier:
                keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:4300:1300::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:52:3f:58:3b:4d:5b:77:ac:5b:0d:03:9a:2b:64:d3:c4:42:
         ab:61:4a:41:36:72:d0:7d:2e:35:c7:eb:22:18:88:92:e5:64:
         f1:fb:45:eb:6e:3c:34:e1:ff:6f:ab:9e:a8:bd:31:54:bf:75:
         bd:4d:fd:50:a7:25:97:bf:b8:1b:31:6b:8c:ff:aa:9a:71:a0:
         2d:ea:99:5f:10:18:3c:14:07:a7:e8:2a:c7:a0:59:e6:e6:f7:
         37:97:15:a0:a7:a3:c3:2a:31:3a:4c:cb:a4:67:a9:a2:88:b0:
         b0:29:95:38:c5:d5:58:39:76:2e:d2:e8:6a:40:75:d6:a3:ab:
         df:86:b6:0d:40:7b:c5:41:42:22:4c:ef:30:7b:82:08:7b:bf:
         84:f8:f5:ae:da:b3:86:2e:39:3e:7d:fb:71:ee:ce:e3:b3:2c:
         aa:8a:79:67:f5:af:0a:1e:2f:06:b2:3e:d7:2a:35:0f:cd:c6:
         da:64:cb:5f:93:be:ad:83:8e:a1:0a:85:55:5d:60:5f:86:ca:
         c9:6e:a5:74:22:e7:98:4c:8e:81:54:03:b8:25:e4:41:84:31:
         5c:f2:e2:08:29:a2:10:63:62:3c:dc:3b:b8:ad:57:6f:de:9b:
         95:a6:6e:8c:82:f0:ac:41:20:52:f9:03:40:31:57:25:fb:aa:
         10:7a:1d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 5 17:08:45 2025 by rpki-client